Now on Twitter

the unofficial HackerOne disclosure timeline.

X

b'HackerOne' disclosed a bug submitted by b'qwertyqwerty' 
b'TeamProfile exposes partially sensitive information through GraphQL'

08 Aug 2018

b'MyEtherWallet' disclosed a bug submitted by b'mrbean' 
b'Development configuration file https://myetherwallet.com/'

08 Aug 2018

b'Uber' disclosed a bug submitted by b'orange' 
b'Improper Access Control on Onelogin in multi-layered architecture'

08 Aug 2018

b'Discourse' disclosed a bug submitted by b'fransrosen' 
b'CSRF-tokens on pages without no-cache headers, resulting in ATO when using CloudFlare proxy (Web Cache Deception)'

08 Aug 2018

b'Cloudflare' disclosed a bug submitted by b'yox' 
b'Private API key leakage due to lack of access control'

08 Aug 2018

b'Vanilla' disclosed a bug submitted by b'tikoo_sahil' 
b'Able to Select Every Poll Option[http://tedwebers-famous-loudspeakers.vanillacommunities.com]'

08 Aug 2018

b'Brave Software' disclosed a bug submitted by b'kmodi' 
b'Cross domain tracking even with 3rd party cookies disabled.'

07 Aug 2018

b'Brave Software' disclosed a bug submitted by b'0ktavandi' 
b'OPEN REDIRECTION at every 302 HTTP CODE'

07 Aug 2018

b'Razer US' disclosed a bug submitted by b'gdinar' 
b'XSS on Saved Carts page'

07 Aug 2018

b'Razer US' disclosed a bug submitted by b'gdinar' 
b"Customer's e-mail disclosure"

07 Aug 2018

b'Shipt' disclosed a bug submitted by b'robd4k' 
b'Open redirect on marketing site'

07 Aug 2018

b'Monero' disclosed a bug submitted by b'anonimal' 
b'Constant-time comparison is not always implemented; critical areas are vulnerable to key-timing attacks'

06 Aug 2018

b'HackerOne' disclosed a bug submitted by b'suresh1c' 
b'Content spoofing and potential Cross-Site Scripting vulnerability on www.hackerone.com'

04 Aug 2018

b'Augur' disclosed a bug submitted by b'droblin' 
b'Augur UI data can be completely replaced by an attacker which can lead to fund and reputation loss '

04 Aug 2018

b'PullString' disclosed a bug submitted by b'ruvlol' 
b'Eternal "change password" link.'

04 Aug 2018

b'RubyGems' disclosed a bug submitted by b'plover' 
b'Gem signature forgery'

03 Aug 2018

b'Facebook' disclosed a bug submitted by b'michiel' 
b'IDOR in Facebook Messages webcam photos'

03 Aug 2018

b'Facebook' disclosed a bug submitted by b'michiel' 
b'iPhone app XSS in Facebook Mail'

03 Aug 2018

b'Shipt' disclosed a bug submitted by b'm7mdharoun' 
b'Subdomain Takeover at test.shipt.com'

02 Aug 2018

b'Trello' disclosed a bug submitted by b'crisph3ll' 
b'Stored XSS via Chrome plugin'

02 Aug 2018

1 ... 436 437 438 439 440 ... 728

BY DENIS WERNER - @NOBBD - IMPRESSUM